STAR Labs Summer Pwnables 2025

Writeups for all 3 very difficult pwn challenges

LZ1

Exploiting a buffer overflow in the LZ1 compression algorithm

Using a dirty pagetable attack to exploit a Linux kernel controlled decrement vulnerablity

Leaking the flag with an out-of-bounds access in a WASM module